Abstract: A virtualized storage array provides deduplication for a primary storage array that supports VVOLs. The VVOLs may be created for VMs that support host applications and guest OSs in a VDI environment. A VVOL is initially created as a virtualized managed drive that is backed by the virtualized storage array. The data is deduped by the virtualized storage array. After deduplication the data is either maintained on the virtualized storage array or moved to the primary storage array based on satisfying deduplication criteria such as reduction ratio.

Abstract: A method performed by a storage management computer includes (a) receiving a set of storage profile definitions (SPDs) from an administrator of a data storage system over a user interface, each SPD of the set of SPDs including (1) a storage profile name and (2) a set of storage policies assigned to that SPD, (b) providing the storage profile names from the set of SPDs to an environment management application, the environment management application being configured to manage environments that use storage from the data storage system, (c) in response to providing, receiving a selection of a particular SPD from the environment management application to be used in connection with a particular environment, and (d) provisioning a unit of storage from the data storage system to the particular environment in accordance with the set of storage policies assigned to the particular SPD.

Abstract: The invention is a system and method for ensuring that a storage virtualization system performs as a trusted delegate for a user attempting to access data on an authenticated server. Data is moved from a first server to a second server by a storage virtualization system. Even though the user may have been authenticated to access the first server, the storage virtualization system which re-directs user requests to the migrated data on the second server may not be authenticated. The first time a user is re-directed to the second server, the storage virtualization system will obtain request to act as a trusted delegate for the user by communicating with a third server, such as a Kerberos domain controller. After the storage virtualization system is properly authenticated as a trusted delegate for the user, future re-directed requests will be seamless and transparent to the user.

Abstract: For enhanced access control, a client includes a token in each read or write command sent to a block storage device. The block storage device evaluates the token to determine whether or not read or write access is permitted at a specified logical block address. For example, the token is included in the logical block address field of a SCSI read or write command. The client may compute the token as a function of the logical block address of a data block to be accessed, or a metadata server may include the token in each block address of each extent reported to the client in response to a metadata request. For enhanced security, the token also is a function of a client identifier, a logical unit number, and access rights of the client to a particular extent of file system data blocks.

Abstract: A namespace server translates client requests for access to files referenced by pathnames in a client-server namespace into requests for access to files referenced by pathnames in a NAS network namespace. The namespace server also translates between different file access protocols. If a client supports redirection and is requesting access to a file in a file server that supports the client's redirection, then the namespace server may redirect the client to the NAS network pathname of the file. Otherwise, the namespace server forwards a translated client request to the file server, and returns a reply from the file server to the client. A file server may redirect a redirection-capable client's access back to the namespace server for access to a share, directory, or file that is offline for migration, or for a deletion or name change that would require a change in translation information in the namespace server.